unclecode crawl4ai vulnerabilities

Newest CVEs

• CVE-2026-119122

  Crawl4AI before 0.9.5 Blind SSRF via CacheValidator Freshness Check

  unclecode · crawl4ai

  Medium6.9
• CVE-2026-119121

  Crawl4AI 0.9.0 before 0.9.5 JavaScript Injection via css_selector and wait_for

  unclecode · crawl4ai

  Medium5.3
• CVE-2026-119120

  Crawl4AI 0.9.0 before 0.9.5 Untrusted Model Loading via CosineStrategy model_name

  unclecode · crawl4ai

  High7.7
• CVE-2026-119119

  Crawl4AI before 0.9.5 Denial of Service via Unbounded CrawlerRunConfig Delay Fields

  unclecode · crawl4ai

  High8.7
• CVE-2026-119118

  Crawl4AI before 0.9.5 Improper Certificate Validation via Hard-coded Chromium Flags

  unclecode · crawl4ai

  High8.3
• CVE-2026-115508

  Crawl4AI 0.7.0 before 0.9.5 ReDoS via /crawl Regex Fields

  unclecode · crawl4ai

  High7.1
• CVE-2026-112363

  Crawl4AI 0.8.7 through 0.9.5 SSRF Bypass via SSLCertificate.from_url URL Userinfo

  unclecode · crawl4ai

  Medium6.9
• CVE-2026-109239

  Crawl4AI before 0.9.4 Blind SSRF via RobotsParser.can_fetch robots.txt Fetch

  unclecode · crawl4ai

  Medium6.9
• CVE-2026-109238

  Crawl4AI 0.7.0 before 0.9.4 SSRF via link_preview_config URL Seeder

  unclecode · crawl4ai

  Critical9.2
• CVE-2026-109237

  Crawl4AI 0.9.0 before 0.9.4 Untrusted Config Gate Bypass Leaks Environment Variables

  unclecode · crawl4ai

  High8.6